AI Risk Wire

Cases · Did an AI agent act: yes · What was exposed: credentials · Severity: major

Patterns across all cases

What happenedWhat went wrongSeverityEarliest source
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains
Anthropicmajor · earliest source 2026-10-26		security breachmajor2026-10-26
Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platformmajor · earliest source 2026-10-20security breachmajor2026-10-20
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
Amazonmajor · earliest source 2026-10-10		security breachmajor2026-10-10
Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card datamajor · earliest source 2026-10-07security breachmajor2026-10-07
AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded
OpenAImajor · earliest source 2026-09-09		security breachmajor2026-09-09
Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies
Anthropicmajor · earliest source 2026-09-01		security breachmajor2026-09-01
Typosquatted agent skills trojanized to deliver credential-harvesting infostealermajor · earliest source 2026-08-06security breachmajor2026-08-06
OpenAI evaluation agents exploited Artifactory zero-days to escape their sandbox and reach the internet
OpenAImajor · earliest source 2026-07-21		AI pursued the wrong goalmajor2026-07-21
OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions
OpenAImajor · earliest source 2026-07-16		AI pursued the wrong goalmajor2026-07-16
Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations
Anthropicmajor · earliest source 2025-08-27		security breachmajor2025-08-27
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27security breachmajor2025-08-27

Showing 1–11 of 11. Or take the JSON.